Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe/9c1218b9-d7cf-3709-afc0-dda94187f212.roa
File:                     9c1218b9-d7cf-3709-afc0-dda94187f212.roa (raw, json)
Hash identifier:          lHxeMhBcMDCswLywx1Pqcxm/JeQAfzezJF7bmDhKsF8=
Subject key identifier:   FC:75:F7:3C:60:56:97:54:DC:1C:F6:D3:0C:E4:EA:0F:CD:17:0D:71
Certificate issuer:       /CN=bc515206-ffe6-4baf-9dde-1faa0a2e4dfe
Certificate serial:       010D0C9F4328584E7A64D7788506C9A929C23EE0
Authority key identifier: 71:08:68:9B:F2:42:58:CC:3B:BD:94:D6:F8:D7:D5:EB:B6:2F:E5:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe/9c1218b9-d7cf-3709-afc0-dda94187f212.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     36671
IP address blocks:        2620:106:3000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:d7:78:85:06:c9:a9:29:c2:3e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc515206-ffe6-4baf-9dde-1faa0a2e4dfe
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=44918549-e3aa-4bc2-bf02-ed315bbb0e87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c7:e7:ea:18:2f:4a:b5:30:02:22:0a:2d:3b:
                    cc:ea:c2:10:eb:6b:c6:45:43:bd:aa:4f:1f:60:c5:
                    44:c1:3b:a1:d6:15:f3:59:a1:4c:cb:e4:3d:5d:f5:
                    74:40:7a:3a:b8:55:73:3f:f0:bd:df:4d:b6:21:80:
                    c1:4d:5c:db:bc:16:11:49:9b:39:35:99:96:1f:13:
                    00:45:9c:f7:56:56:66:12:62:29:77:6d:76:bf:9a:
                    0a:31:3e:f7:07:a5:04:b4:fe:01:f2:e1:2c:50:25:
                    8f:6d:21:e8:df:1a:0d:27:bc:c7:b8:e0:37:ce:c0:
                    6d:1c:d1:a6:c9:60:9c:d2:5f:ed:15:3f:1c:48:98:
                    64:6b:d0:29:fa:b0:15:1c:29:7b:7b:06:ad:8e:f2:
                    79:1e:f8:08:b4:f0:66:48:e8:82:6c:61:35:9f:eb:
                    39:86:bd:f0:93:bf:6d:e1:6b:e1:e2:35:96:31:3f:
                    93:52:d5:0c:bb:c1:58:e4:27:50:bd:58:be:b5:34:
                    ea:d0:53:da:fa:d5:a6:22:c9:76:4d:dc:eb:c4:16:
                    89:ae:74:4f:df:30:6a:a4:41:77:96:0b:3b:1f:60:
                    ee:77:bb:55:9f:55:97:45:a4:93:88:3d:d7:50:8e:
                    7f:75:a1:bc:93:e4:f0:0a:51:43:28:ec:5d:70:cc:
                    22:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:75:F7:3C:60:56:97:54:DC:1C:F6:D3:0C:E4:EA:0F:CD:17:0D:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe/9c1218b9-d7cf-3709-afc0-dda94187f212.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe.crl

            X509v3 Authority Key Identifier:
                keyid:71:08:68:9B:F2:42:58:CC:3B:BD:94:D6:F8:D7:D5:EB:B6:2F:E5:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bc515206-ffe6-4baf-9dde-1faa0a2e4dfe.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:106:3000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:b8:48:e8:0f:cf:2e:ae:dc:4d:41:90:f7:c7:f7:d4:74:f2:
         d7:f6:66:ec:f5:96:ba:38:c6:25:0a:85:96:1c:99:4b:5a:30:
         a8:43:5c:5e:e0:76:cc:39:c9:c5:5d:0e:67:19:39:82:d7:fc:
         ee:9c:21:94:db:f2:c4:5a:98:aa:e4:7a:6d:16:67:e8:f5:db:
         07:b3:90:43:94:05:aa:b5:63:d1:ff:ac:66:a7:1c:e2:10:39:
         e2:f8:5e:a4:9f:b6:07:e9:c9:3f:02:77:65:51:16:fd:8c:80:
         6f:92:23:f3:d8:e4:b2:29:9b:af:f6:4e:62:cd:b7:53:d6:0b:
         6d:b4:4a:38:6c:5f:12:24:3d:64:08:55:b9:5a:15:94:97:09:
         55:53:ed:be:e4:42:78:3d:0a:a0:3c:cc:76:55:ce:47:37:99:
         5d:6f:62:49:17:65:32:df:f3:29:c3:20:6f:8b:82:60:b6:8d:
         60:7a:bb:45:8f:56:00:08:8a:76:16:57:fa:eb:52:17:94:02:
         46:31:fd:8a:cb:5b:6e:6f:43:76:d8:77:f7:73:eb:21:4d:4b:
         29:71:26:89:3e:d3:6a:85:fa:d3:85:63:9b:99:9b:4d:b0:08:
         27:70:da:0e:cc:81:f3:57:d2:12:c7:0b:a1:d3:ce:90:ab:b5:
         5d:b1:2b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:28:26 2026 by rpki-client